Your message dated Sun, 15 May 2016 13:33:57 +0000 with message-id <[email protected]> and subject line Bug#806901: fixed in citadel 902-1 has caused the Debian Bug report #806901, regarding citadel: Runs as root but shouldn't to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 806901: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806901 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Source: citadel Version: 9.01-1+b1 Severity: important Tags: security patch Hi, This server runs as root by default, but shouldn't. It spews warnings over the console about it. The culprit is likely this line, which is present in upstream's postinst but missing in ours: export CITADEL_UID=`grep ^citadel: /etc/passwd | cut -d : -f 3` (They have it right after export CITADEL_INSTALLER=yes) The log message is: Dec 01 21:54:59 citadel citserver[480]: citadel should not be configured to run as root! Check the value of c_ctdluid -- System Information: Debian Release: 8.2 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system)
--- End Message ---
--- Begin Message ---Source: citadel Source-Version: 902-1 We believe that the bug you reported is fixed in the latest version of citadel, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Michael Meskes <[email protected]> (supplier of updated citadel package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 13 May 2016 10:37:49 +0200 Source: citadel Binary: citadel-server citadel-mta citadel-doc citadel-dbg Architecture: source amd64 all Version: 902-1 Distribution: unstable Urgency: medium Maintainer: Debian Citadel Team <[email protected]> Changed-By: Michael Meskes <[email protected]> Description: citadel-dbg - complete and feature-rich groupware server - debugging symbols citadel-doc - complete and feature-rich groupware server (documentation) citadel-mta - complete and feature-rich groupware server (mail transport agent) citadel-server - complete and feature-rich groupware server Closes: 806901 822572 Changes: citadel (902-1) unstable; urgency=medium . * Imported Upstream version 902 * Update package to use libical2. Thanks to Andreas Henriksson <[email protected]> (Closes: #822572) * Set citadel uid in postinst. Thanks to John Goerzen <[email protected]> (Closes: #806901) * Bumped debhelper and standards version, no changes needed. Checksums-Sha1: b91b5dab5b07666c270fb1adf4d04c00dc182f5d 2364 citadel_902-1.dsc 81933600ff53eb6f7fd723f80126a827e432e20c 721860 citadel_902.orig.tar.gz e6082ad9dcae59aa639401f323f0ee066dda9e40 50409 citadel_902-1.diff.gz 6c134fd7a1342a3991dbe797f85d88548a46848c 1757662 citadel-dbg_902-1_amd64.deb 8a9179882033be7fe77822bed9b5439841ad2824 46300 citadel-doc_902-1_all.deb 049966dc593662c974a7b28b0efdc16455853a72 11880 citadel-mta_902-1_amd64.deb 5aac4e668a1316b4dc86a7222a241591ee927362 377516 citadel-server_902-1_amd64.deb Checksums-Sha256: 34174626a2898c4c07d2abafa707fe631cb7d4f483fe00e6919860230a421a86 2364 citadel_902-1.dsc e28a32636784bb30b7aad0671f1637a35502cf10144fddb7498ebd137f4ae2b5 721860 citadel_902.orig.tar.gz 07d3d42735b687eb0d71b247bc401258d3647eae9e0ee77f857a7098c83f0d0f 50409 citadel_902-1.diff.gz 9f2cec959f5a08de3f2bfc907c38764254326bc5567987a96322d7095364e9fb 1757662 citadel-dbg_902-1_amd64.deb 54f484e1a3ecbab5da8a93543f1fc5a80e86607f5345fee509c00ef5a694592c 46300 citadel-doc_902-1_all.deb 33d21e9179303bdebf8a5cb07dd4c2cd21211278b391fd30bdde273de076c983 11880 citadel-mta_902-1_amd64.deb aa4adc3266371af7b458012b91bcae138298cc2dcf16734c2d0e6a856331a32d 377516 citadel-server_902-1_amd64.deb Files: afa59a38b5211ff2d1ad3e60e6076c0c 2364 mail extra citadel_902-1.dsc 9ffa14573a568fe06e8f28ef2e81e113 721860 mail extra citadel_902.orig.tar.gz 396fa5e6068b808e71dc1bef0e1f8a14 50409 mail extra citadel_902-1.diff.gz d9c38829aa607c655e9da5c313e4a805 1757662 debug extra citadel-dbg_902-1_amd64.deb 7b48830acbc9b2eb89144137fcb9ad2f 46300 doc extra citadel-doc_902-1_all.deb 86066ea86503dbf6662b6a713989dd63 11880 mail extra citadel-mta_902-1_amd64.deb d0c2e568bb62f9bd2e070daf293c6d40 377516 mail extra citadel-server_902-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBVzhqqDXYV8C7yzslAQgyAxAA0c1nR/UFGDHYoGIv46ug0hiaDPP+mb1N IPVbAK+7as1Wcg+V5uRUI2F3IawOESNt4qQVrjmeB5dO0XW2dlRdoh/W51zvlgU/ 73nfAIZ+qKxDylOnXDt0MYC2BbIWMxl+umiTsQcdO2ceOc3L+pAksqo/zNRrzSm6 qBKA1v2/6owYCO+B4gPH05j7tC7oZ1G4Hd03S/Gi9/DYrUEGai/i2/AfWkmfouT6 8pkf9uQKoxJzZ0A488m/S1PyZprcLcH5rxdUR9IrDhQKlfRgGye355D9xte19KZj UN/dGf/FZC7dW89zku0oR2Uiq9GZwFPW3hK3udx1qa2EGd16cAG6ywvlVs+cm91O 16Fk7BcxP6ODztcImu2MMbvbLsLaGHL57MLcSVG/txkJMz434NQl7aRUwFE2YzTg BD8Ds4N+LmGkbkCBXTJXxN0CM+kgzsqf0VfD95pKcNs1q6U/DsH5YBIpE+Je8fjE WI/2sWRqyG9itAB+sBr1jJpiuxtjrlFCNYCfzYwhJXOrndW/g2MDKHuTpuwR74/b 4MgmuV5FghqIWkR8LpGyBXIXKJ62a1tddY2h7KfYz7ia4WQs32L+bVBjvshma4HQ vEomLib6L73BrS3Tt7pXKoiHgfBNlf8o2sXaJ7m1KxGcN8L+zLN3tEWWOYTKiUyZ +ffRxLWCIXI= =be+N -----END PGP SIGNATURE-----
--- End Message ---
